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Claims : 

1 . A method creating an augmented Mealy machine from a Mealy machine having an input 
space a, a state space Q and an output space A, the method comprising the steps of: 

A. selecting as a state q„ one of (Al) a dedicated output stopping state from the state space d 
that is not reachable from any other state in Q such that Q' = Q and (A2) an additional stopping state 
not in 6 if no dedicated output stopping state exists in Q such that g ' = g u {qg}; 

B. setting 4 ' = J and adding a dedicated blank symbol Bto A' only if A does not already 
contain a dedicated blank symbol B; 

C. modifying the state-transition mapping 6 to 6' such that the augmented Mealy machine 
always remains in q„ once q^ is entered; 

D. modifying the output mapping k to A' such that the augmented Mealy machine always 
outputs B once q^ is entered; and 

E. modifying a domain D of the state-transition mapping. 

2. The method as claimed in claim 1, further comprising the steps of: 

F. selecting an integer N' based on the size of the state, input, and an output spaces; 

G. selecting a number N, no less than iV; and 

H. determining a vectorization of input, state, and output spaces resulting in vectors over 
Z^, wherein N is prime if the Mealy machine is represented using polynomials. 

3. The method as claimed in claim 2, further comprising the steps of: 

F. adding dummy states until Q contains a number of states determined by a vectorization of 
the state space using N; 

G. adding dummy input symbols until 2' contains a number of symbols determined by the 
vectorization of the input space using N; 

H. adding dummy output symbols until A' contains a number of symbols determined by the 
vectorization of the output space using N; 

I. for each pair {q,o)^D', setting 6'(q,o)=q^ and X'{q,o)=B. 

4. The method as claimed in claim 2, further comprising the steps of: 

F. adding states until Q contains a number of states determined by the vectorization of the 
state space using N according to the sub-steps of: 

i. selecting a random qeQ (alternatively in the current g ^-{g }), 

ii. adding a state q' to Q, 
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iii. for every oeS setting 6'(g^,o)=6'(^,o) and ',a)=V(^,o), 

iv. optionally also for every pair (q,o)eQ 'xH such that ^'{q,o) =q , randomly 
setting b'{q,o) to be one of q and q' and randomly setting 6'(^ ',o) to be 
one of q and q'; 

G. modifying D to D' to reflect the addition of the new definitions; 

H. adding dummy input symbols to S' until it contains a number of symbols determined by 
the vectorization of the input space using N; 

I. adding dummy output symbols to A' until it contains a number of symbols determined by 
the vectorization of the output space using N; 

J. for each pair {q,o)$D ', setting b'{q,d) to a random q'eQ and setting X{q,o') to a random 
symbol from A'. 

5. The method as claimed in claim 2, further comprising the steps of: 

F. adding dummy states xmtil Q contains a number of states determined by the vectorization 
of the state space using A^; 

G. adding dummy input symbols until S' contains a number of symbols determined by the 
vectorization of the input space using N; 

H. adding dummy output symbols until A' contains a number of symbols determined by the 
vectorization of the output space using N; 

I. for each pair {q,a)€D ' , setting b'{q,o) to a random q'eQ, setting X'(q,a) to a random 
output symbol in A'. 

6. The method as claimed in claim 1, further comprising the step of: 

F. interchanging states at random, and adjusting 6' and X' accordingly; 

G. interchanging symbols in the extended input alphabet S', and adjusting 8' and X' 
accordingly; and 

H. interchanging symbols in the extended output alphabet A', and adjusting 5' and V 
accordingly. 

7. A method of transforming state-transition and output mappings of an augmented Mealy 
machine to polynomial mappings, the method comprising the steps of: 

computing interpolations of 6' and V from the state-transition and output mappings; and 
performing polynomial interpolation of the original state-transition and output mappings. 
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8. The method as claimed in claim 7, further comprising the step of pre-computing 
coefficients of a,(jc) functions, wherein the step of performing polynomial interpolation of the original 
mappings uses the pre-computed coefficients of the alx) functions. 

9. A method of converting a Blum-Shub-Smale machine to a BSS' machme, comprising: 

A. selecting an integer such that: (1) iV is at least as large as the number of nodes, (2) N is 
greater than user-specified constants used in defining the Blum-Shub-Smale machine, (3) iV is a prime 
number; 

B. restricting a ring R to only integer fields of a form Z^; 

C. restricting computation mappings to only polynomial mappings; 

D. providing a new node-numbering convention; 

E. changmg comparisons in branch nodes to set membership relations of the form eK, where 
^e(Z^{0}); 

F. revising a definition of a full state space to include a current node number, an internal 
state space, and output and input spaces to produce a revised full state space; 

G. restricting computation mappings, g„, to an identity mapping for input components of a 
revised full state vector; 

H. restricting all computation mappings, g„, such that no output components in the full state 
vector may be used in further computation; 

I. requiring that at least one computation mapping uses at least one input vector component; 
J. requiring that all halting nodes generate output; and 

K. restricting node to (1) computation nodes, which may contain at least one of computations 
and branches, and (2) halting nodes. 

10. A method of specifying a BSS' machine, comprising the steps of: 

A. specifying a set of nodes; 

B. specifying computation mappings for each node; 

C. specifying a next-node function p, along with set membership relations; 

D. selecting an integer N such that: (1) N is at least as great as a number of nodes, (2) is 
greater than user-specified constants used in defming a corresponding Blum-Shub-Smale machine, 
and (3) iV is a prime number; and 

E. specifying a vectorization of the state, input, and output spaces. 

1 1 . The method as claimed in claim 9, further comprising at least one of the steps of: 
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listing explicity the halting nodes of the BSS' machine; and 
explicitly specifying an output symbol 5 as a halting signal 

12. The method as claimed in claim 10, fiirther comprising at least one of the steps of: 
listing explicity the halting nodes of the BSS' machine; and 

explicitly specifying an output symbol j5 as a halting signal. 

13. A method of transforming a BSS' machine to a multivariate polynomial mapping, 
comprising the steps of: 

A. acquiring a specification of a BSS' machine; 

B. expressing a set membership relation €K, K£(Z^{0}), as a polynomial; 

C. expressing a next-node function p as a polynomial; and 

D. expressing a complete computing endomorphism Has a multivariate polynomial 
mapping. 

14. A method of transforming a BSS' machine to a mapping represented as a function table, 
comprising the steps of: 

A. selecting a specification of a BSS' machine if no single multivariate polynomial 
computing endomorphism His given; 

B. selecting a multivariate polynomial mapping Hfor the BSS' machine; 

C. converting state and input vectors, both with base-iV components, to a base A^^^*^ number 
X, where l+S+I is a total number of components in the state and input vectors, wherein the state 
vector includes a node number; 

D. converting the output of the computing endomorphism Fwith base-A'^ components, to a 
base N^*^^° number F, where l+S+O is the total number of components in the output of H; 

E. inserting F into the ^ entry in the function table; and 

F. repeating steps (C)-(E) for all possible state vector/input vector combinations. 

15. A method of computing with a BSS' machine transformed to a muhivariate mapping 
comprising the steps of: 

A. initializing the BSS' machine; 

B. applying the multivariate mapping to the full state space vector; 

C. checking if the machine has halted, and ending computation if the machine has halted; 

and 
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D. repeating steps (B) and (C) if the machine has not halted. 

16. The method as claimed in claim 15, wherein the step of applying fiirther comprises at 
least one of (1) reading the output vector produced by the machine and (2) changing the input vector 
of the machine. 

17. The method as claimed in claim 15, wherein the step of initializing comprises the sub- 
steps of (1) specifying a node number; (2) specifying a remaining initial state vector; and (3) 
specifying an initial input vector. 

18. A method of specifying a pattern of encryption of multivariate mappings with univariate 
mappings comprising the steps of: 

A. specifying a number d of variables of the multivariate mapping; 

B. specifying a number e of mapping components of the multivariate mapping; 

C. selecting variables to be used in encrypted form; 

D. selecting mapping components to be encrypted; and 

E. selecting equality restrictions to be placed on components in the key pairs. 

19. A method of generating keys for univariate encryption of multivariate mappings, 
comprising the steps of: 

A. determining a key representation; 

B. acquiring a specified pattern of encryption; 

C. determining a number of key pairs to be generated from an acquired pattern of encryption; 

and 

D. permuting elements of field Zf^ while simultaneously recording data for the permutation 
and its inverse in two arrays R and S once for each unique key pair generated. 

20. The method as claimed in claim 19, wherein the multivariate mappings to be encrypted 
are expressed using polynomials, fiirther comprising the step of computing the permutation and its 
inverse by interpolation, using a,(x); once for each unique key pair that is to be generated. 

21. The method as claimed in claim 19, wherein the multivariate mappings to be encrypted 
are expressed using polynomials, further comprising the steps of: 

precomputing arithmetic operations over the field Zf^; and 



-69- 



precomputing coefficients of functions a,{x), wherein the step of computing the permutation 
and its inverse by interpolation uses the precomputed coefficients of functions a,{x) and the 
precomputed arithmetic operations. 

22. The method as claimed in claim 19, wherein the steps of determining a number of key 
pairs further comprises the step of restricting possible keys according to a user input. 

23. The method as claimed in claim 19, further comprising the step of setting keys in the key 
pairs, that are neither to encrypt nor decrypt, to the identity mapping. 

24. A method of encrypting plural variables and mapping components of multivariate 
mappings, represented, with univariate mappings of an appropriate representation, comprising the 
steps of: 

A. determining a representation for the encryption; 

B. replacing each variable to be decrypted x, with a decrypted equivalent s^^,{xy, 

C. composing the decrypted equivalents with a mapping h; and 

D. composing each mapping component to be encrypted, h,, with an encryption function r„ to 
create r,{h,i. . . )). 

25. The method as claimed in claim 24, wherein the multivariate mappings comprise 
mappings represented as one of function tables and polynomials. 

26. A method of generating re-encryption keys for re-encryption of plural variables and 
mapping components of multivariate mappings, already partially encrypted with first univariate 
functions, with second univariate functions, comprising the steps of: 

A. determining a representation for the re-encryption; 

B. acquiring key pairs corresponding to the first univariate functions; 

C. generating a new set of key pairs {r\, s\), . . . , , 5„+m); 

D. symbolically composing with for 1 < i<n; and 

E. symbolically composing r, with s, for n<i<n+m. 

27. The method as claimed in claim 26, further comprising the step of acquiring a pattern of 
encryption used for the first univariate functions, wherein the step of generating comprises generating 
the new set of key pairs based on the acquired pattern. 
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28. A method of re-encryption of plural variables and mapping components of multivariate 
mappings already partially encrypted with first univariate functions with second univariate functions, 
comprising the steps of: 

A. determine a representation for re-encryption; 

B. symbolically substituting the variable x,.„ with r,{s'i (x,,„y) for all n<i<n+m; and 

C. symbolically composing r, with the function component/ for all 1 <i<n. 

29. The method as claimed in claim 28, further comprising the step of acquiring a 
corresponding set of pairs of re-encryption keys, wherein the step symbolically composing comprises 
composing using the acquired keys. 

30. A method of converting a mapping t : Z^-^Z^ , given as a function table, into a function 
t':Z^m-^Zj^„, also given as a function table, comprising the steps of: 

A. computing X=A^"'x„+...+iV'.r2+^i for a vector (x^,...,x^)eZ^ ; 

B. computing F=N'-%+...+N%+fi for an entry (/;,.../„) corresponding to (Xi,...^J; 

C. setting f'(-^=^; and 

D. repeating for all (Xp...,x^eZ^ . 

31. A method of converting a function t'.Z^m-^Z^„, given as a function table, into a function 
t '-.Z^-^Z^ , also given as a function table, comprising the steps of: 

A. computing X=A'"'"'^x^+...+A'''x2+Xj 

B. reducing t{X) to a base-iV representation, such that tiX) is represented by a tuple (/"p -.^) ; 

C. setting the tuple in t, indexed by (x^.-pc^) to (/j,-^) ; and 

D. repeating for all (;Cj,...,x^)eZ;^ . 

32. A method of symbolically composing mappings/: Z^^^Z^^ and g:Z^-^Z^ represented 
as function tables to produce the function table for comprising the steps of: 

A. generating a new function tj.Z^m-^Z^„ represented by a function table, where every 
mapping value corresponding to a (Xj,...pc^) is placed in entry number 
X=A^'""^x^+...+iV^+Xj as the numberF=A/'""y„+...+iVV2+/i \ 

B. generating a new function : Z^„-Z^„ represented by a function table, where every 
mapping value corresponding to a is placed in entry number 
X=N"'~^x^+...+N\+x^ as the rmmherF=N"'Y^+...+N%+f^ ; and 
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C. for each X from 0 to AT - 1 setting tJX) =tJjpC)) , where is a function table for a 
function t^:Zj^m^Zj^„. 

33. A method of specifying a pattern of encryption of multivariate mappings with other 
multivariate mappings comprising the steps of: 

A. selecting a number of mapping components c. to be grouped together, c.s 1 , for in all / 
successive groups of components, covering all components in a mapping only once; 

B. selecting a number of variables c. to be grouped together, c.> 1 , for in all ^ - / successive 
groups of variables, covering all variables in a mapping only once; 

C. selecting groups of components to be encrypted; 

D. selecting groups of variables to be used in encrypted form; and 

E. selecting equality restrictions to be placed on components in the key triples. 

34. A method of generating keys for multivariate encryption of multivariate mappings, 
comprising the steps of: 

A. determining a representation for the keys; 

B. defining for an key triple two temporary TV^'xCc.+l) arrays R and S; 

C. defining a temporary polynomial /to translate from base-iV vectors to base-A^ ' vectors 
with c. components; and 

D. permuting a ring Z^c, , and simultaneously translating a permutation and its inverse to a 
field Z^ for every key triple; 

E. repeating steps B-D for all triples not set equal to identity. 

35. The method as claimed in claim 34, wherein the mappings to be encrypted are expressed 
using polynomials, further comprising the step of computing the permutation and its inverse by 
interpolation, using at least a portion of /? and as interpolation data, using a,(x), once for each 
unique key triple that is to be generated. 

36. The method as claimed in claun 34, further comprising the step of setting all key triples 
that are to do neither encryption nor decryption to the identity mapping. 

37. The method as claimed in claim 34, further comprising the steps of (1) pre-computing 
arithmetic operations over the field and (2) pre-computing coefficients of the functions aj(x), 
wherein the steps of permuting comprises using the pre-computed ape) . 
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38. The method as claimed in claim 34, further comprising the step of restricting a new set of 
key triples based on a pattern of encryption used during an encryption of the first multivariate 
polynomials. 

39. A method of encrypting plural groups of variables and groups of mapping components of 
multivariate mappings, with other multivariate mappings, comprising the steps of: 

A. determining a mapping representation for encryption; 

B. replacing each group of encrypted variables w, with a decrypted equivalent s,+^w,y, 

C. composing each of the decrypted equivalents with a mapping h; and 

D. composing each group of mapping components to be encrypted v, with r, giving r,(v,(...)). 

40. A method of generating re-encryption keys for re-encryption of plural variables and 
mapping components of multivariate mappings already partially encrypted with first multivariate 
mappings with second multivariate mappings comprising the steps of: 

A. determining a representation for keys; 

B. acquiring key triples used with the first multivariate mappings; 

C. generating a new set of key triples (c/,r/,5 /),... ,(c/,/-/,5/) ; 

D. symbolically composing r, with Sj for 1 <.i<l; and 

E. symbolically composing with for l<i<k. 

41 . The method as claimed in claim 40, wherein the multivariate mappings comprise one of 
polynomials and function tables. 

42. A method of re-encrypting plural variables and mapping components of multivariate 
mappings already partially encrypted with first multivariate mappings with second multivariate 
mappings, the method comprising the steps of: 

A. determining a representation for the re-encryption; 

B. acquiring key triples used for the encryption using the first multivariate mappings; 

C. symbolically substituting an variable block with r.(Sj (w.,^)) , for all l<i<:k; and 

D. symbolically composing r /(s.(w)) with an function component block v . for all l<i<l. 

43. A method of symbolically composing mappings/Z^-Z;^ and h^,...,hf:Z^-'Z^ , 
represented as function tables, to produce the function table for 
y(^j(xp...p:^^),/z2(^^^^p...,x^^^^^),...,/zj^(x^_p^^p...,xj), comprising the steps of: 
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A. acquiring a specification for the c^ such that c.=m; 

B. generating a new function tjiZ^^-^Z^n represented by a function table, where every 
mapping value (fp-/^ corresponding to a (Xj,...^^) is placed in entry number 
X=N'"-'^x^+...+N\+x^ as the number F=N"-%+...+N%+f^ ; 

C. for each / generating a new function .:Z^c,-Z^c, represented by a function table where 
every mapping value (/z. j,...,/?.^) corresponding to a C^a+p -j^^+c)' "^here «=5^j=| c., is placed in 
entry number X=N''''^x^^^ "^ ■"*"-^'^a+2'*"-^a+l ^ ^'^^ number H=N''''^h.^ +...+N^h.^+h. ^ . 

D. initializing a new function table for a function/^:Z^»,-Zjy m ; 

E. for every i from 1 to ^: setting y^=N''' ; 

F. for every i from 0 to iV"-! : 

i. setting iF=Q; 

ii. for every j from A: to 1 setting w -yju+t^'^ ; 

iii. setting /^(/)=ir^w); and 

iv. incrementing the vectorized index {lo^,...,h^ , taking into account that is 
in base , is in base , ... , is in base yj^. 

44. A method of symbolically composing mappings yiZ^-Z^ and h^,...,hj^.Zj^^Zfl 
represented as function tables to produce the function table for 

(/2j(/;(Xi,...^J,.../^^(Xp...pcJ),...,;2^(/„.^^,i(Xj,...pcJ,.../„(Xi,...^J)), comprising the steps of: 

A. acquiring a specification for the c. such that 5^=i c^=n; 

B. generating a new function tjiZ^m-*Zj^„ represented by a function table, where every 
mapping value (f^,.-/^ corresponding to a (Xj,...,x^) is placed in entry number 
X=N'"~^x^+...+N^X2+x^ as the number F=N"~%+...+N%+f^ ; 

C. for each i generating a new function -.Z^cf^Z^c, represented by a function table where 
every mapping value (/?. iv,^,^) corresponding to a (fa+i,--fa*c)^ where «=5Zj=l c., is placed in 
entry number X^N"''^/^^^ number H=N^'~^h.^^+... +N^h.2+h. -^ . 

D. initializing a new function table for a function t-^j.Z^m'^Z^m', 

E. setting ^0=1, y^=\; 

F. for every / from 2 to A: setting y f^y ^^^^'^''^ ; 

G. initializing a vector to (0,...,0); 

H. for every / from 0 toiV " - 1 : 

i. setting u-tp); 

ii. setting ^=0; 

iii. for every j from A: to 1 : 
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a. setting p to the integer result of ulyj ; 

b. setting u =u-pyj to get the remainder; 

c. setting p to the integer result of u/yj_ j ; 

d. setting bj~tf^j(p); 

e. adding yjbj to q; and 
iv. setting tf^p)=q. 

45. A Turing platform, supporting unencrypted and partially encrypted polynomial 
computation for some machine M, on a host O, comprising: 

A. a Turing machine; 

B. a register writeable by a finite control of the Turing machine and readable by M; 

C. a register readable by the finite control of the Turing machine and writeable by M; 

D. a register writeable by the host O; and 

E. a register readable by the host O. 

46. A method of computing with host O running a Turing platform T supporting at least one 
of a Mealy or BSS' machine M, comprising: 

A. initializing the machine; 

B. initialize the Turing platform; 

C. reading, by T, a storage cell at which its finite control is located; 

D. writing, by T, a contents of the storage cell to a register readable by M; 

E. writing, by O, to a remaining input of M; 

F. executing, by O, one computation step for M; 

G. writing, by O, some output of Mto part of the register readable by T; 

H. writing, by O, Af s computed direction of movement for the finite control of J to a 
remainder of register readable by T; 

I. writing, by O, a rest of the output of Mto the host O; 
J. reading, by T, from the readable register of T; 

K. writing, by T, a new cell value to storage; 
L. moving the finite control of Tone of left, right, and not at all; 
M. checking by O to see if a halting condition has occurred; and 
N. repeating steps (C)-(M). 

47. The apparatus of a register machine, comprising: 
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A. a set P = -^(^^ ^^)| of vectors of integers inZ^ indexed by vectors also in ; 

B. either a vector S indicating the end of the program in P, or a constant T, vv^hich functions 
as an instruction indicating that the computation is finished; 

C. a vector CeZ^ functioning as instruction pointer; 

D. a set S^^^. of vectors of integers inZ^^ indexed by vectors also in Z^ ; 

E. a vector DeZ^ functioning as storage pointer; 

F. at least one register (^p...,^^) of vectors of integers in for 0<m<N; 

G. a next instruction pointer mapping /|^j,...,^^,P^,iSg,C,^):Zj^^'"*'^^^z/ ; 

H. a next storage pointer mapping g{R^,...,R^,Pg,SQ,C,D^:Z^^^^^^Z^ ; 

I. a specification of the registers that accept input from the host platform; 

J. a number k of registers not accepting input from the host platform, such that 0<k<m ; 

K. a register transition mapping h{R^,...,R^,pQ,Sg,C,D^:Z^"'*^^^Z^ \ 

L. a storage transition mapping qiR^,...,R^,Pg,Sg,C,Dy.Z^^'"*^^-^Z^; 

M. a specification for initializing P and 5; and 

N. a specification for where input is entered, including: 

• through at least one register, 

• through at least one storage space S, 

through an initial contents of an instruction space P, or 
through an initial contents of the at least storage space S. 

48. A method of initializing a register machine comprising the steps of: 

A. specifying initial values of R^,...,R^,C,D; 

B. optionally specifying values for at least one storage cell Sg in 5; 

C. specifying elements in P; and 

D. computing values of and Sg. 

49. A method of using a register machine, comprising the steps of: 

A. initializing the register machine; 

B. computing a next instruction pointer: C' ='j\R^,...,R^,PQ,Sg,C,D^; 

C. computing a next storage pointer: D' =g{R^,...,R^,P^, 8^,0,0^; 

D. computing a value to be written to a current storage cell: S'=q{R^,...,R^,P^, 5^,0,0^; 

E. computing the register transition mapping: iRj^,...,Rj^~h{R^,...,R^,P^,Sg,C,Dj, 
whereyj,...,7^ specify the registers which the register machine may change; 

F. setting Sg=S\C = c! , and D^D'\ 
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G. computing anAS^ using input from a host; and 

H. repeating steps (B)-(G) until a halting condition is satisfied. 

50. The method as claimed in claim 48, further comprising: 

I. specifying a register dedicated to output of movement direction, using an integer;^ such 
that 0<y<,m, and an integers such that Q<z<.d; 

J. specifying a register dedicated as output to a Turing platform; and 

K. specifying a register dedicated as input from a Turing platform, wherein each storage unit 
is a vector in . 

5 1 . A method of using a register machine M on a host O comprising the steps of: 

A. initializing a register machine; 

B. initializing a Turing platform; 

C. reading, by T, a storage cell at which its finite control is located; 

D. writing, by T, a contents of the storage cell to a specified register of M; 

E. writing, by O, to a remaining specified input registers of M; 

F. computing the next instruction pointer: C'~j{R^^..,,R^,PQ,Sg,C,D^; 

G. computing the next storage pointer: D'=g{R^,...,R^,PQ,Sg,C,Dj; 

H. computing the value to be written to the current storage cell; 
S^=q[R^,...,R^,Pg,Sg,C,D); 

I. computing the register transition mapping: ,...,Rj ^=hi^R^,.,.,R^,P^,Sg,C,Dj, 
wheiej ^ specify the registers which the register machine may change; 

J. setting Sg=s', C = C',and D = d'; 

K. computing P^ andS^ ; 

L. reading, by T, from the readable register of M; 

M. vwiting, by T, a new cell value to storage; 

N. reading, by T, from a second readable register of M its direction of movement; 
O. moving the finite control of Tone of left, right, and not at all; 
P. checking by O to see if a halting condition has occurred; and 
Q. repeating steps (C)-(P). 

m n d- c 

52. A method of symbolically composing/Zj^-Zyy with /Zj,...,/z^:Z;^'^Z;^', producing the 
mappingX^i(x^(i J^f^j c.=m, comprising the steps of: 
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A. acquiring a specification of index selections e{\,l),...,e{l,di\...,e{k,l),...,eik,di,) deciding 
how variables are used in the composition; 

B. initializing a vector to (0,...,0); 

C. performing, for every / from 0 to N"- 1 

1. For everyy from ^ to 1 compute hj(a^^. ^y...,a^gj^) do: 

a. setting tj^ia^,...,a„)=J{hi,...,h^; 

b. increment a vectorized index (ai,...,oJ. 

53. A method of symbolically composing hi,...,h,, with / producing the mapping 
comprising the steps of: 

A. acquiring a specification of index selections e\\,l),...,e '(l,CiX-..,e \k,\),...,e '(k,c^ 
deciding how mapping components are used in the composition; 

B. acquiring a specification of index selections e{\,l),...,e{\,d{),...,e{k,\),...,e{k,d^ deciding 
how variables are used; 

C. setting a vector (ai,...,a„) to (0,...,0). 

D. For every / from 0 to N"- 1 do: 

1. Foreveryyfrom^to 1 compute /?y(/^/(,;i)r -^/(,;cp'^^(,-,i)' - '^^(,w;)' 

a. Setting t^a^,...,aJ={h„...A). 

b. Increment the vectorized index (ai,...,a„). 

54. A method of specifying a pattern of parametrized encryption of multivariate mappings 
with other multivariate mappings comprising the steps of: 

A. selecting a number of mapping components c. to be grouped together, c.> 1 , for all / 
successive groups of components, covering all components in a mapping only once; 

B. selecting a number of variables c. to be grouped together, c.> 1 , for all A: - / successive 
groups of variables, covering all variables in a mapping only once; 

C. selecting a group of variables g„ l<g.<k, to be used as "parameter", or explicitly 
selecting no such "parameter" for all k successive groups of components and variables; 

D. selecting groups of mapping components to be encrypted; 

E. selecting groups of variables to be used in encrypted form; and 

F. selecting equality restrictions to be placed on components in the key quadruples. 
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55. A method of generating keys for parametrized multivariate encryption of multivariate 
mappings, comprising the steps of: 

A. determining an appropriate representation for the keys; 

B. defining for an key quadruple that is to do parametrized encryption/decryption two 
temporary N ' ^'x{c.+l) arrays R and S; 

C. defining for an /* key quadruple that is to do non-parametrized encryption/decryption two 
temporary N'''x{c. + 1 ) arrays Rm6S; 

D. repeating steps (A)-(C) for all / quadruples; 

E. defining a temporary polynomial/ to translate from base-A?" vectors to base-AT"' with c. 
components; 

F. permuting a ring Z^c„ and simultaneously translating the permutation and its inverse to 
the field Z^'; 

G. repeating step (F) in all n""^' times while recording data, for key quadruples that are to do 
parametrized encryption/decryption; and 

H. repeating steps (E)-(G) of generating permutations for every key quadruple. 

56. The method as claimed in claim 55, wherein the mappings to be encrypted are expressed 
using polynomials, further comprising the step of computing encryption and decryption mappings by 
interpolation, using at least a portion of R and S as interpolation data and using a,(x), once for each 
unique key quadruple that is to be generated. 

57. The method as claimed in claim 55, further comprising the step of restricting a new set of 
key quadruples according to a pattern used for encryption. 

58. The method as claimed in claim 55, further comprising the step of setting all key 
quadruples that are to do neither encryption nor decryption to the identity mapping. 

59. A method of encrypting multivariate mappings with parametrized multivariate mappings, 
comprismg the steps of: 

A. determining appropriate mapping representation for the encryption; 

B. symbolically substituting each group of variables w._i to be decrypted in a parametrized 
manner with -y/w-.^jW^ _p ; 

C. symbolically substitutmg each group of variables vP._, to be decrypted in a non- 
parametrized manner with s.(w._^) ; 
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D. symbolically composing each group of mapping components v^. to be encrypted in a 
parametrized manner with rfy.,w^ _^ ; and 

E. symbolically composing each group of mapping components v . to be encrypted in a non- 
parametrized manner with r^.(v .) . 

60. A method of specifying an encryption pattern for parametrized encryption of a register 
machine, comprising the steps of: 

A. defining a pattern of parametrized encryption; 

B. setting all ci=d for a mapping doing computations of the register machine; 

C. marking at least one register affected by a register transition mapping as plaintext 
registers; 

D. marking a next instruction pointer and next storage pointer mappings as plaintext 
mappings; 

E. marking key quadruples for the marked registers as not to be encrypted/decrypted; 

F. marking the register transition mapping for non-parametric encryption; 

G. marking the storage cell mapping q for parametric encryption; and 

H. marking at least one "cell" in the storage space as plaintext "cells". 

61. A method of key generation for parametrically encrypting a register machine, comprising 
the steps of: 

A. determining a representation for keys; 

B. defining, for a key quadruple that is to do parametrized encryption/decryption on storage 
cells, two temporary N'^*'^'x(d+l) arrays R and S; 

C. defining for an key quadruple that is to do non-parametrized encryption/decryption on 
register variables two temporary N'^x(d+l) arrays R and S; 

D. defining a temporary polynomial /to translate from base A'^'^ to base-iV vectors with d 
components; 

E. permuting a ring Z^d, and simultaneously translating the permutation and its inverse to a 
field Z^; 

F. setting the permutations to the identity mapping for the cells in the storage mapping 
marked as unencrypted; 

G. repeating step (F) in all A'^'^ times, except for cells in the storage mapping marked as 
unencrypted, while recording data, for the key quadruples that are to do parametrized 
encryption/decryption on the storage mapping; 
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H. permuting the ring Z^d, and simultaneously translating the permutation and its inverse to 
the field Z^; and 

I. repeating the permuting step (H) for every key quadruple that is to encrypt a register 
transition mapping. 

62. The method as claimed in claim 61, wherein mappings are represented using 
polynomials, further comprising the step of: computing encryption and decryption mappings using 
in all 2d polynomial interpolations using R and S and a base-translation function/ for all / 
quadruples. 

63. The method as claimed in claim 60, further comprising: 

determining an appropriate representation for an encryption of the register machine; and 
encryption the register machine. 

64. The method as claimed in claim 61, further comprising the step of acquiring an set of key 
quadruples for use compositions. 

65. The method as claimed in claim 10, wherein the steps (A)-(E) are performed by a 
computer. 

66. The method as claimed in claim 13, wherein the steps (A)-(D) are performed by a 
computer. 



67. The method as claimed in claim 14, wherein the steps (A)-(F) are performed by a 
computer. 



